Re: creating certificate only structure -- CMS_sign

2019-05-14 Thread Michael Richardson
{resending, because it did not seem to make it into the archives} https://www.openssl.org/docs/man1.1.0/man3/CMS_sign.html says: If signcert and pkey are NULL then a certificates only CMS structure is output. I am trying to create one to return in an RFC7030 (EST) /cacerts request. It appear

creating certificate only structure -- CMS_sign

2019-05-13 Thread Michael Richardson
https://www.openssl.org/docs/man1.1.0/man3/CMS_sign.html says: If signcert and pkey are NULL then a certificates only CMS structure is output. I am trying to create one to return in an RFC7030 (EST) /cacerts request. It appears that it needs to be a NID_pkcs7_signed. a) Do I need to set any